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INFORMATION DISCLOSURE STATEMENT 

Sir: 

In accordance with the duty under 37 C.F.R. § 1.56 of each 
individual associated with the filing and prosecution of the 
above-identified patent application (hereinafter, "associated 
individuals'') to disclose all information known to that 
individual to be material to patentability,. Applicant (s) hereby 
submits attached Form PTO-144 9 (modified) listing cited 
references. This submission is made in accordance with 37 
C.F.R. §§ 1.97 and 1.98 and § 609 of the Manual of Patent 
Examining Procedure . 
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The cited references, while believed to be of some 
relevance, are not necessarily considered to teach or suggest 
any aspect of the invention described and claimed in the above- 
identified patent application. Applicant (s) hereby expressly 
reserves the right to swear behind the effective dates of any of 
the cited references. Applicant (s) further reserves the right 
to question the relevance, materiality, and/or prior art status 
of any of the cited references in whole, in part, or in 
combination, subsequent to the filing of this information 
disclosure statement. This information disclosure statement is 
also not to be construed as a representation that a search has, 
or has not, been conducted or that no better art exists. 
Rather, this information disclosure statement discloses only the 
best references of which the associated individuals are aware. 

The Examiner is respectfully requested to consider each of 
the cited references, to indicate such consideration by 
initialing in the space provided next to each cited reference on 
the enclosed Form PTO-1449 (modified), to sign the initialed 
Form PTO-1449 (modified), and to return a copy of the same with 
the next communication to the Applicant (s) . 
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For the convenience of the Examiner in considering the 
cited references, a copy of each of the cited references is 
enclosed with this communication. In considering the cited 
references, it may be noted by the Examiner that certain of the 
references may contain markings, underlinings, and/or other 
notations. These markings, underlinings, and/or other notations 
are not to be construed as drawing the Examiner's attention 
either to selected parts or away from other parts of the cited 
references. Any such markings were either present on the copies 
of the cited references obtained by the associated individuals, 
or were made thereon during the study of the references by the 
associated individuals. 

In accordance with 37 CFR § 1.97(b), this information 
disclosure statement is being filed (i) within three months of 
the filing date of the above-identified patent application; (ii) 
within three months of the date upon which the above-identified 
patent application entered the national stage as set forth in 37 
CFR § 1.491; or (iii) before the mailing date of a first Office 
Action on the merit for the above-identified patent application. 
Accordingly, no statement or fee is required. 
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Please charge any shortage in. fees due in connection with 
the filing of this communication to Deposit Account No. 50-0206, 
and please credit any excess fees to such deposit account. 




TEA/ 



Respectfully submitted, 
on & /WilljiAms LLP 




Thomas E. Anderson 
Registration No. 37,063 



Hunton & Williams LLP 
1900 K Street, N.W. 
Washington, D.C. 20006-1109 
Telephone: (202) 955-1500 
Facsimile: (202) 778-2201 



Date: November 26, 2003 
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FORM PTO-1449 U.S. DEPARTMENT OF COMMERCE 
(REV. 7-80) PATENT AND TRADEMARK OFFICE 

LIST OF MATERIALS CITED BY APPLICANT 

(Use several sheets if necessary) 


ATTY. DOCKET NO.: 
57983.000166 


SERIAL NO.: i 
To be assigned 


INVENTOR'S NAME: 
Martin SOUKUP. 


EXAMINER: 
To be assigned 


FILING DATE: 
Herewith 


GROUP: 

To be assigned 



U.S. PATENT DOCUMENTS 



•EXAMINER 
INITIAL 




DOCUMENT NUMBER 


DATE 


NAME 


CLASS 


SUBCLASS 


FILING 
DATE 



















































































































FOREIGN PATENT DOCUMENTS 







DOCUMENT NUMBER 


DATE 


COUNTRY 


CLASS 


SUB- 
CLASS 


TRANSLATION 


YES 


NO 

























































OTHER MATERIALS (Including Author, Title, Date, Pertinent Pages, Etc.) 



Stefan Savage, David Wetherall, Anna Karlin and Tom Anderson, "Practical Network Support for IP Traceback," 

SIGCOMM'OO, Stockholm, Sweden. 

Cheng Jin, Haining Wang and Kang G. Shin, "Hop-Count Filtering: An Effective Defense Against Spoofed DDoS Traffic," 
Proceedings of the 10 th ACM conference on computer and communication security, pp.30-41 . 

T. Peng, C. Leckie and K. Ramamohanarao, "Detecting Distributed Denial of Service Attacks Using Source IP Address 
Monitoring," The University of Melbourne - Dept. of Electrical and Electronic Engineering Technical Report, Nov. 2002. 

T. Peng, C. Leckie and K. Ramamohanarao, "Detecting Distributed Denial of Service Attacks by Sharing Distributed Beliefs," 
8 th Australasian Conference on Information Security and Privacy, Wollongong, Australia, July 2003. 

Sven Dietrich, "Scalpel, Gauze, and Decompilers Dissecting Denial of Service (DDoS) ," ;login: The Magazine of Usenix & 
Sage, Nov. 2000, Vol. 25, No. 7, pp.52-55. 

J. Li, J. Mirkovic, M. Wang, P. Reiner, and L. Zhang, " SAVE: Source Address Validity Enforcement Protocol," INFOCOM 
2002. 

D. Fasulo, "An Analysis of Recent Work on Clustering Algorithms," University of Washington - Department of Computer 
Science & Engineering Technical Report # 0 1 -03-02, April 26, 1 999. 

Al Reuben, "Re: Average and median IP packet size over the Internet?" found at 
http://www.cctec.com/maillists/nanog/historical/9804/msg00547.html. 



EXAMINER 


DATE CONSIDERED 


♦EXAMINER: Initial if reference considered, whether or not citation is i 


n conformance with MPEP 609; Draw line through citation if not in 



conformance and not considered. Include copy of this form with next communication to applicant. 
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